rag-blueprint

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill serves as an operational assistant for the NVIDIA RAG Blueprint repository. Its instructions are consistent with official documentation for deploying and maintaining AI infrastructure.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of Docker containers and model weights (up to 200GB) from the NVIDIA Container Registry (nvcr.io) and official NVIDIA GitHub repositories. These are verified technology providers and well-known services.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform system diagnostics (detecting GPUs, drivers, and port availability) and infrastructure management (docker compose, helm, kubectl). These commands are transparently documented in the playbooks and are necessary for the skill's primary operational purpose.
  • [SAFE]: Credential management for NGC API keys is handled through standard local environment practices. The skill instructs users on how to export keys or store them in .env files, with no evidence of exfiltration or insecure hardcoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 04:35 PM
Security Audit — agent-trust-hub — rag-blueprint